Description
In affected versions of Octopus Server it is possible for the OpenID client secret to be logged in clear text during the configuration of Octopus Server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Octopus Deploy | Octopus Server | 2022.2.7897 – < unspecified, unspecified – < 2023.1.11942, unspecified – < 2023.2.13151, unspecified – < 2023.3.5049 | unspecified |
Advisories 1
- WID-SEC-2023-3110 Octopus Deploy: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Dec 11, 2023